PhpBB is prone to an HTML injection vulnerability. This is due to the application failing to properly sanitize user-supplied input. The attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user. This issue was reported to affect phpBB version 2.0.7, however, earlier versions may also be vulnerable.
PhpBB is prone to an HTML injection vulnerability. This is due to the application failing to properly sanitize user-supplied input. The attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user. This issue was reported to affect phpBB version 2.0.7, however, earlier versions may also be vulnerable.